#Mongolia

1 article

Chinese APT Leverages PlugX & ShadowPad with Cloud C2 for Mongolian Espionage

A Chinese state-sponsored APT is exploiting Microsoft Outlook, Slack, Discord, and file.io for C2, deploying PlugX and ShadowPad in espionage operations targeting

Runtime Rebel Intel

4 min read·Apr 23, 2026